Row-Level Security | John Nessime

Tenant Isolation on AWS: Building a Multi-Tenant Workshop Platform That Doesn’t Leak

Post category:Cloud Computing Cloud Security SaaS Engineering

A missing tenant filter doesn't throw an error, it returns a 200 with too many rows. This is how to build a multi-tenant workshop management platform on AWS where the isolation boundary sits below your application code: STS session tags feeding IAM conditions, DynamoDB leading keys, scoped S3 prefixes, forced PostgreSQL row-level security, and a control plane that verifies each new tenant is fenced before anyone logs in.

Build a CRM Knowledge Assistant on Amazon Bedrock Without Leaking Salesforce Records

Post category:Cloud Computing DevOps Technical Guides

Connecting Salesforce to Amazon Bedrock Knowledge Bases takes an afternoon. Making sure the assistant does not read people records they were never allowed to see takes longer. A practical walkthrough of the connector, the permission model it quietly drops, and the two architectures that actually hold up.

How to Connect BI Tools to AWS Data Without a Runaway Bill

Post category:Cloud Computing Technical Guides

Getting Tableau or Power BI to return rows from your data lake takes an hour. The problems arrive three weeks later. Here are the four access patterns worth considering, why fine-grained security and cheap dashboards pull against each other, and the cost levers that actually move the invoice.

Redshift Cost Optimization for SaaS Analytics: The Levers That Actually Move the Bill

Post category:Cloud Computing DevOps Technical Guides

In a SaaS analytics product, the Redshift bill tracks how often queries arrive, not how much data they touch. Here is how the meter actually works, why connection pools bill you while nobody is using the product, how to attribute spend to a tenant, and which isolation choices quietly cost more than they save.

Embedded Analytics on AWS: The Four Decisions That Bite Later

Post category:Cloud Computing DevOps Technical Guides

Rendering a dashboard inside your app is the easy part. Tenant isolation, session cost and query mode are what break. A practical walkthrough of the four decisions behind embedded analytics on AWS, the API constraints that lock you in, and the errors you will actually see.